Static task
static1
Behavioral task
behavioral1
Sample
890b172404a06bb591325ba2137a08584f8d18d2d658798f04a6aea05639e63a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
890b172404a06bb591325ba2137a08584f8d18d2d658798f04a6aea05639e63a.exe
Resource
win10v2004-20221111-en
General
-
Target
890b172404a06bb591325ba2137a08584f8d18d2d658798f04a6aea05639e63a
-
Size
820KB
-
MD5
9e8af1ade1ad717dc2b54d441be10ebb
-
SHA1
0922353555881b777762a4f24f81ae8f8d602b8c
-
SHA256
890b172404a06bb591325ba2137a08584f8d18d2d658798f04a6aea05639e63a
-
SHA512
8e2714bdf6c92a84cccf74502a354c9a943efc51a455fc5437a7168befa39aaacbb204bf87c746467b5af2024dd0e3b2cda31526713c59c5bc9d921b43f9c8cd
-
SSDEEP
24576:cTMbcwB0osg8y7N1c3ByXDd39RfLtV/LnE6kxRfF:cTKdeoXJ12MJbLv/jfG/
Malware Config
Signatures
Files
-
890b172404a06bb591325ba2137a08584f8d18d2d658798f04a6aea05639e63a.exe windows x86
9dcb043084f4415f9b1c9b53b3876667
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateMutexA
ResumeThread
LocalFree
GlobalSize
WriteFile
GetACP
InterlockedExchange
GlobalFree
GetCommandLineA
GetStdHandle
FindVolumeClose
CloseHandle
lstrlenA
ResetEvent
GetEnvironmentVariableW
GetModuleHandleW
CreateEventA
GetExitCodeProcess
GetPrivateProfileIntW
advapi32
RegDeleteValueA
CreateServiceA
RegQueryValueW
ControlService
RegCreateKeyExW
IsTextUnicode
IsValidAcl
ClearEventLogA
RegCloseKey
CloseEventLog
IsValidSid
RegEnumKeyW
RegDeleteKeyA
admparse
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 811KB - Virtual size: 810KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ